Skip to content

HoneProject/Windows-Sensor

Repository files navigation

Host-Network (Hone) Packet-Process Correlator for Windows

Copyright (c) 2014-2015 Battelle Memorial Institute
Licensed under a modification of the 3-clause BSD license
See License.txt for the full text of the license and additional disclaimers

Author: Richard L. Griswold
Contributors: Peter L. Nordquist, Ruslan A. Doroshchuk, Alexis J. Malozemoff,
Brandon J. Carpenter, and Glenn A. Fink


H   H  OOO  N   N EEEEE
H   H O   O NN  N E
HHHHH O   O N N N EEEE
H   H O   O N  NN E
H   H  OOO  N   N EEEEE


Hone is a tool for correlating packets to processes to bridge the HOst-NEtwork
divide. The Hone Packet-Process Correlator for Windows consists of a
kernel-mode driver that performs packet-process correlation and user-mode
utilities for reading data collected by the driver and managing the driver.
For information on building, installing, and using Hone, as well as technical
information about the inner workings of Hone, see the Readme.html file.

About

Perform packet-process correlation on Windows using the Windows equivalent of the Linux sensor.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published